Firefox 117.0.1 Update Fixes Webp Vulnerability

The corrective issue of Firefox 117.0.1 has been released to address several problems. Although the vulnerability report with detailed information has not been opened yet, the code commits on Mozilla’s code repository suggest that a critical vulnerability in the Libwebp library (CVE-2023-4863) has been patched. This vulnerability allowed attackers to execute malicious code when processing specially crafted Webp images.

Aside from the security fix, the following issues have also been resolved in this release:

  • An error causing an unexpected termination of background processes has been fixed.
  • A change in the url.protocol property has been temporarily reverted. This change will be reintroduced in the future in sync with other browsers.
  • A problem affecting the functionality of sound worklets on websites utilizing exceptions to WebAssembly has been resolved.
  • An issue with the recovery option for all tabs in the “Recently Closed Tabs” menu has been fixed.
  • A problem that caused certain elements in the bookmark menu to remain visible after collapsing the browser has been addressed.
  • An error resulting in incorrect detection of the time zone on certain websites has been rectified.
  • An error causing Firefox on MacOS to fail in opening certain external links has been fixed.
/Reports, release notes, official announcements.